6.5
Medium
CVE-2026-67383 Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose…
Description
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SQL Server 2025 (CU8) 17.0 | 17.0.0.0 → < 17.0.4085.5 | 17.0.4085.5 |
| Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0 | 17.0.1050.2 → < 17.0.1135.8 | 17.0.1135.8 |
References
- Microsoft SQL Server Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft SQL Server 2025 (CU8)
The 69 CVEs of Microsoft SQL Server 2025 (CU8) →
CVE-2026-88088
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally
7.0
High
CVE-2026-88086
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network
5.3
Medium
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
6.4
Medium
CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
7.0
High